beb3442c07
Separate LOGTO_PUBLIC_ENDPOINT (browser-facing, defaults to http://localhost:3001) from LOGTO_ENDPOINT (Docker-internal). Also fix bootstrap M2M verification by using correct Host header for default tenant token endpoint. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
33 lines
861 B
Plaintext
33 lines
861 B
Plaintext
# Cameleer SaaS Environment Variables
|
|
# Copy to .env and fill in values
|
|
|
|
# Application version
|
|
VERSION=latest
|
|
|
|
# PostgreSQL
|
|
POSTGRES_USER=cameleer
|
|
POSTGRES_PASSWORD=change_me_in_production
|
|
POSTGRES_DB=cameleer_saas
|
|
|
|
# Logto Identity Provider
|
|
LOGTO_ENDPOINT=http://logto:3001
|
|
LOGTO_PUBLIC_ENDPOINT=http://localhost:3001
|
|
LOGTO_ISSUER_URI=http://logto:3001/oidc
|
|
LOGTO_JWK_SET_URI=http://logto:3001/oidc/jwks
|
|
LOGTO_DB_PASSWORD=change_me_in_production
|
|
LOGTO_M2M_CLIENT_ID=
|
|
LOGTO_M2M_CLIENT_SECRET=
|
|
LOGTO_SPA_CLIENT_ID=
|
|
|
|
# Ed25519 Keys (mount PEM files)
|
|
CAMELEER_JWT_PRIVATE_KEY_PATH=/etc/cameleer/keys/ed25519.key
|
|
CAMELEER_JWT_PUBLIC_KEY_PATH=/etc/cameleer/keys/ed25519.pub
|
|
|
|
# Domain (for Traefik TLS)
|
|
DOMAIN=localhost
|
|
|
|
CAMELEER_AUTH_TOKEN=change_me_bootstrap_token
|
|
CAMELEER_CONTAINER_MEMORY_LIMIT=512m
|
|
CAMELEER_CONTAINER_CPU_SHARES=512
|
|
CAMELEER_TENANT_SLUG=default
|